CVE-2024-0758

MediumCVSS 6.1

Published: 19/01/2024(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.57%

43th percentile - higher than 43% of all known CVEs

Summary

Cross-site scripting vulnerability in MolecularFaces before 0.3.0 allows a remote attacker to execute arbitrary JavaScript in the victim's browser via crafted molfiles.

Risk Assessment

An attacker can hijack user sessions, steal data, or perform other malicious actions within the victim's browser context.

Recommendation

Immediately update MolecularFaces to version 0.3.0 or later, which includes a fix for the XSS vulnerability.

Original NVD description (English source)

MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.